$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5bf61de8-5170-34dc-9de0-a33e7f05155c.roa File: 5bf61de8-5170-34dc-9de0-a33e7f05155c.roa (raw, json) Hash identifier: bTU0Z4qo2aqyYK7DmurKRm3nTV0Cno5sZOfoD1VPUxg= Subject key identifier: C1:0C:57:54:DB:C5:39:AE:62:67:79:8F:FB:93:DD:D2:05:24:28:63 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A0C0579A1E1BD59240E1B7B00 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5bf61de8-5170-34dc-9de0-a33e7f05155c.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 1239 IP address blocks: 23.237.74.0/23 maxlen: 24 23.237.82.0/23 maxlen: 24 23.237.158.0/23 maxlen: 24 23.237.208.0/24 maxlen: 24 50.7.72.0/22 maxlen: 24 192.240.100.0/23 maxlen: 24 198.255.121.0/24 maxlen: 24 2001:49f0:d002::/48 maxlen: 48 2001:49f0:d048::/48 maxlen: 48 2001:49f0:d090::/48 maxlen: 48 2001:49f0:d0c9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:79:a1:e1:bd:59:24:0e:1b:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=f0856068-4e9c-42cf-b24f-c0c8ed3a4a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:be:4d:02:f4:b1:db:24:68:14:09:e7:1f:fb: be:6f:79:b8:3e:d0:a6:70:94:80:05:0b:a5:ef:dc: 4c:20:19:5d:ae:f2:63:1f:17:52:12:0c:2c:fc:d9: 64:17:7d:80:61:c4:bd:2a:a8:61:ae:53:67:cf:79: 95:e4:a0:e5:65:7d:ee:9a:e3:de:da:55:5c:2f:7b: c3:0d:2c:d7:31:6a:26:76:67:ca:47:f6:02:29:85: d2:ae:cb:88:7f:4e:7a:9d:30:47:26:38:be:65:fb: 94:3b:71:61:4e:6d:34:83:fc:c1:30:78:10:27:65: 01:63:29:78:30:eb:52:6b:55:ec:3f:21:6b:d6:1c: 6b:76:18:78:aa:1f:05:b7:bb:fd:a8:be:b9:b9:58: 46:3d:3c:3f:6f:09:39:ca:06:65:2e:21:f8:b8:71: 63:1c:e9:91:bb:3b:9f:38:9e:48:38:2f:1b:ff:51: c4:12:06:2f:7d:f2:60:10:af:a6:e5:45:7d:ed:2e: 33:92:71:de:67:6f:fa:4f:f8:eb:2f:7b:ee:d7:a1: 06:92:33:f3:d4:9e:7d:5b:c9:2e:50:51:bd:fe:8c: 94:f2:69:45:07:f9:4a:b2:eb:44:01:77:89:45:35: b0:d2:b3:74:b6:73:b6:e9:df:ec:51:7e:6f:6f:32: 4c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0C:57:54:DB:C5:39:AE:62:67:79:8F:FB:93:DD:D2:05:24:28:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5bf61de8-5170-34dc-9de0-a33e7f05155c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.74.0/23 23.237.82.0/23 23.237.158.0/23 23.237.208.0/24 50.7.72.0/22 192.240.100.0/23 198.255.121.0/24 IPv6: 2001:49f0:d002::/48 2001:49f0:d048::/48 2001:49f0:d090::/48 2001:49f0:d0c9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:86:9c:4f:93:77:80:fd:e2:41:50:99:f7:11:2f:d7:60:12: 60:0f:76:38:35:62:61:aa:de:67:14:05:83:0e:a4:b7:44:4e: 51:e7:fe:11:cf:70:c3:01:ff:a6:c0:52:9e:11:05:e3:6c:87: 45:f6:0b:59:7e:29:9d:6b:47:b0:92:04:e7:b3:a6:58:18:50: 67:30:7b:d1:1e:c1:da:28:15:54:d5:c7:d3:10:38:d8:7d:6f: cd:16:91:49:ef:50:d2:b1:3c:ac:3a:5d:5c:03:83:c1:cf:40: c0:ab:51:77:b7:35:87:fa:91:fc:ab:bc:e5:70:cb:c4:80:b0: a9:e1:10:aa:47:16:79:c1:a8:f4:03:00:1d:96:5f:89:8f:ae: 59:20:23:26:61:bb:a8:f6:b8:02:2f:fb:78:cc:7a:05:59:b1: 9f:4c:6f:9c:0a:0e:1e:30:c7:c4:46:30:4e:a2:f2:31:33:91: 09:d5:f5:b3:6b:14:3b:0c:e4:71:5a:36:3c:56:4f:7d:20:67: 6d:31:f8:e2:f6:ec:69:cd:c6:ab:e3:eb:5a:77:79:3a:2b:4a: 65:86:b0:2c:fc:a0:80:ce:6b:f6:7d:65:b8:50:b1:ad:db:98: 65:00:41:17:d4:57:5c:0c:ce:1c:fa:13:fa:9e:b0:7a:5f:97: 9a:c3:a6:00 -----BEGIN CERTIFICATE----- MIIGkzCCBXugAwIBAgIUAQ0Mn0MoWEoMBXmh4b1ZJA4bewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZjA4NTYwNjgtNGU5Yy00MmNmLWIyNGYtYzBjOGVkM2E0YTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb5NAvSx2yRoFAnnH/u+b3m4PtCmcJSABQul 79xMIBldrvJjHxdSEgws/NlkF32AYcS9KqhhrlNnz3mV5KDlZX3umuPe2lVcL3vD DSzXMWomdmfKR/YCKYXSrsuIf056nTBHJji+ZfuUO3FhTm00g/zBMHgQJ2UBYyl4 MOtSa1XsPyFr1hxrdhh4qh8Ft7v9qL65uVhGPTw/bwk5ygZlLiH4uHFjHOmRuzuf OJ5IOC8b/1HEEgYvffJgEK+m5UV97S4zknHeZ2/6T/jrL3vu16EGkjPz1J59W8ku UFG9/oyU8mlFB/lKsutEAXeJRTWw0rN0tnO26d/sUX5vbzJMCwIDAQABo4IDpTCC A6EwHQYDVR0OBBYEFMEMV1TbxTmuYmd5j/uT3dIFJChjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNWJmNjFkZTgtNTE3MC0z NGRjLTlkZTAtYTMzZTdmMDUxNTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMG8GCCsGAQUFBwEHAQH/BGAwXjAwBAIAATAqAwQBF+1KAwQB F+1SAwQBF+2eAwQAF+3QAwQCMgdIAwQBwPBkAwQAxv95MCoEAgACMCQDBwAgAUnw 0AIDBwAgAUnw0EgDBwAgAUnw0JADBwAgAUnw0MkwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaYacT5N3gP3i QVCZ9xEv12ASYA92ODViYareZxQFgw6kt0ROUef+Ec9wwwH/psBSnhEF42yHRfYL WX4pnWtHsJIE57OmWBhQZzB70R7B2igVVNXH0xA42H1vzRaRSe9Q0rE8rDpdXAOD wc9AwKtRd7c1h/qR/Ku85XDLxICwqeEQqkcWecGo9AMAHZZfiY+uWSAjJmG7qPa4 Ai/7eMx6BVmxn0xvnAoOHjDHxEYwTqLyMTORCdX1s2sUOwzkcVo2PFZPfSBnbTH4 4vbsac3Gq+PrWnd5OitKZYawLPyggM5r9n1luFCxrduYZQBBF9RXXAzOHPoT+p6w el+XmsOmAA== -----END CERTIFICATE-----Generated at Sun Jun 15 15:15:39 2025 by rpki-client